This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/yyRW46EoiEZakH8xmbaVNYZzT7Y.roa File: yyRW46EoiEZakH8xmbaVNYZzT7Y.roa (raw, json) Hash identifier: kZjQSsJWQX8APsUvcm4SD5nZIwt5ENQAkgP42qqBCtI= Subject key identifier: CB:24:56:E3:A1:28:88:46:5A:90:7F:31:99:B6:95:35:86:73:4F:B6 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B791096D73EAC822537498EE84162BAD1 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/yyRW46EoiEZakH8xmbaVNYZzT7Y.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29240 IP address blocks: 192.103.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:96:d7:3e:ac:82:25:37:49:8e:e8:41:62:ba:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb2456e3a12888465a907f3199b6953586734fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:cb:ce:f4:7e:cb:b5:0c:15:ba:3d:4b:46: 5f:48:b6:ae:7e:d6:08:9e:78:0c:c0:7e:56:ef:d2: 98:5c:ef:5b:5f:fa:b3:90:8b:d0:82:63:09:94:db: c6:5c:81:ae:40:aa:f3:e6:69:05:65:57:f1:cf:ad: d8:36:d4:d6:33:1a:19:70:c7:56:e2:dc:4d:5c:0b: 73:fe:c2:fa:8d:ee:76:f9:ba:34:2c:db:64:db:4c: 2b:07:48:0b:2d:43:d3:5d:8f:ce:80:7c:d7:ff:a2: a3:3d:f8:9a:1b:d3:4d:0d:5f:82:77:8f:12:62:77: 38:38:9f:2e:c9:5c:0a:29:44:f0:6a:ad:c2:cb:48: 4b:c5:63:38:7c:72:b1:9d:f1:cd:0a:79:02:2f:7e: 29:d2:61:48:64:63:5e:83:4f:95:8d:bb:b6:69:3b: 3b:c0:a0:be:a0:22:29:f5:2a:5d:c7:b1:28:53:a3: fa:88:03:23:f8:ed:90:d6:31:b6:d3:8c:b9:07:31: f9:27:77:87:d4:94:17:a1:24:12:85:c7:a6:e3:21: e5:ae:68:69:37:1c:35:0b:8f:10:18:d9:ff:2e:92: 63:57:31:d6:f2:c1:01:5e:5d:58:26:58:fa:32:b0: 13:2b:af:de:8a:a6:cd:1c:37:b5:d4:4b:39:1a:89: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:24:56:E3:A1:28:88:46:5A:90:7F:31:99:B6:95:35:86:73:4F:B6 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/yyRW46EoiEZakH8xmbaVNYZzT7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.103.85.0/24 Signature Algorithm: sha256WithRSAEncryption 45:77:c0:1a:c7:e6:68:4e:cd:3e:14:3f:a2:d0:89:e6:a6:ed: 79:a7:66:2a:fe:dc:d7:f4:3c:ed:39:17:af:b4:d9:9a:5d:b9: 91:32:b2:ee:5f:cf:cb:42:54:d9:8f:8f:00:79:13:0e:fa:b7: 3f:b2:a4:f4:55:e6:db:5f:44:39:b0:c2:ff:4f:62:d8:34:37: e2:e2:42:97:a6:fd:7a:37:ad:40:36:00:72:21:1c:84:8e:d1: 8f:4a:bf:87:c1:f4:d5:87:a0:54:31:28:85:70:c2:07:44:06: af:ed:1b:a8:18:90:17:1c:e8:65:59:98:66:b6:18:d9:2b:80: a4:31:21:cf:5e:01:0d:c5:c7:f1:fa:cc:48:bc:ed:72:29:73: 45:fc:c2:fb:7b:1c:40:88:9c:69:60:65:9f:71:1b:c1:bd:e2: a4:33:b5:fa:16:61:08:8d:49:b1:af:89:da:89:83:bd:b0:46: 79:c9:ee:64:05:5f:21:3c:48:c2:75:0d:c3:48:bb:17:4e:33: a5:4f:b9:e9:05:73:51:27:96:aa:f0:89:57:75:e6:a2:74:67: 8c:5a:f4:df:46:cb:85:e1:1a:56:d2:a4:a9:a7:dd:52:6b:91: 77:c1:b2:b8:5f:5f:8e:26:ca:77:0c:9b:3c:da:48:81:08:49: ef:e7:00:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJbXPqyCJTdJjuhBYrrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjI0NTZlM2ExMjg4ODQ2NWE5MDdmMzE5OWI2OTUzNTg2NzM0ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNPLzvR+y7UMFbo9S0ZfSLauftYI nngMwH5W79KYXO9bX/qzkIvQgmMJlNvGXIGuQKrz5mkFZVfxz63YNtTWMxoZcMdW 4txNXAtz/sL6je52+bo0LNtk20wrB0gLLUPTXY/OgHzX/6KjPfiaG9NNDV+Cd48S Ync4OJ8uyVwKKUTwaq3Cy0hLxWM4fHKxnfHNCnkCL34p0mFIZGNeg0+Vjbu2aTs7 wKC+oCIp9Spdx7EoU6P6iAMj+O2Q1jG204y5BzH5J3eH1JQXoSQShcem4yHlrmhp Nxw1C48QGNn/LpJjVzHW8sEBXl1YJlj6MrATK6/eiqbNHDe11Es5Gomq7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMskVuOhKIhGWpB/MZm2lTWGc0+2MB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEveXlSVzQ2RW9pRVpha0g4eG1iYVZOWVp6VDdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGdVMA0G CSqGSIb3DQEBCwUAA4IBAQBFd8Aax+ZoTs0+FD+i0Inmpu15p2Yq/tzX9DztORev tNmaXbmRMrLuX8/LQlTZj48AeRMO+rc/sqT0VebbX0Q5sML/T2LYNDfi4kKXpv16 N61ANgByIRyEjtGPSr+HwfTVh6BUMSiFcMIHRAav7RuoGJAXHOhlWZhmthjZK4Ck MSHPXgENxcfx+sxIvO1yKXNF/ML7exxAiJxpYGWfcRvBveKkM7X6FmEIjUmxr4na iYO9sEZ5ye5kBV8hPEjCdQ3DSLsXTjOlT7npBXNRJ5aq8IlXdeaidGeMWvTfRsuF 4RpW0qSpp91Sa5F3wbK4X1+OJsp3DJs82kiBCEnv5wCR -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:36 2026 by rpki-client